No, I wrote most of this. 


On Nov 7, 2013, at 10:24 PM, Sef Kloninger <notifications@github.com> wrote:

> In playbooks/roles/edxapp/tasks/deploy.yml:
> 
> > +- name: re-enable apparmor profile for code sandbox
> > +  shell: "{{ item }}"
> > +  with_items:
> > +    - "unlink /etc/apparmor.d/disable/code.sandbox"
> > +    - "apparmor_parser -r /etc/apparmor.d/code.sandbox"
> > +  when: EDXAPP_PYTHON_SANDBOX
> > +  tags:
> > +  - deploy
> > +  - edxapp-sandbox
> > +
> > +- name: put code sandbox into aa-enforce or aa-complain mode, depending on EDXAPP_SANDBOX_ENFORCE
> > +  command: /usr/sbin/{{ edxapp_aa_command }} /etc/apparmor.d/code.sandbox
> > +  when: EDXAPP_PYTHON_SANDBOX
> > +  tags:
> > +  - deploy
> > +  - edxapp-sandbox
> I presume you didn't actually write this @jbau, instead this was pulled in from someone else's branch (master?). Is that right?
> 
> —
> Reply to this email directly or view it on GitHub.
>